General
- Target 6c723f18de91928fd801668f9979dd82.exe
- Size 334KB
- Sample220725-hmhfesaha2
- SHA256 bb428497a0ffe56bd930ccd1806c37cc3379e6479ce78d9efd5dc670ecbab8e8
- MD5 6c723f18de91928fd801668f9979dd82
- SHA1 ecaa9e2855f8b99c4f0b8006eeed6444c9e8e795
- SHA512 1a03d14236995ed497763a0f7c1be5cbb349b24523d6701e902c2a0161b4054f126facf52c96a7f8dbd6c4e524a511c705ceb8f53f2140c1ea0c8f41303be3ae
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
6c723f18de91928fd801668f9979dd82.exe
Resource
win7-20220715-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
af
C2
-
trustamsty.com:80
Attributes
-
auth_value
f9fe99fb72fe095ae716b7093f75f872
Targets
-
- Target 6c723f18de91928fd801668f9979dd82.exe
- Size 334KB
- SHA256 bb428497a0ffe56bd930ccd1806c37cc3379e6479ce78d9efd5dc670ecbab8e8
- MD5 6c723f18de91928fd801668f9979dd82
- SHA1 ecaa9e2855f8b99c4f0b8006eeed6444c9e8e795
- SHA512 1a03d14236995ed497763a0f7c1be5cbb349b24523d6701e902c2a0161b4054f126facf52c96a7f8dbd6c4e524a511c705ceb8f53f2140c1ea0c8f41303be3ae
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.